Re: Re:Re: Re:[VOTE] Apache POI 5.2.0 release (RC1)

2022-01-06 Thread PJ Fanning
I commented on the new issue - it looks like an issue that was already fixed a 
few weeks ago - https://bz.apache.org/bugzilla/show_bug.cgi?id=65738






On Thursday 6 January 2022, 14:06:27 GMT+1, Sayi  wrote: 







Hi, PJ


I created an issue: https://bz.apache.org/bugzilla/show_bug.cgi?id=65786.




I also saw the warning message mentioned by #65326 through the log, but there 
were a lot of warning exception stacks in the log when unzipping the docx zip.





在 2022-01-06 16:05:59,"PJ Fanning"  写道:
>Hi Sayi,
>It looks like some of your email is missing. Would it be possible for you to 
>use plain text to give an example of the log messages or to provide a link to 
>a bugzilla issue that describes the problem?
>
>Is it something like https://bz.apache.org/bugzilla/show_bug.cgi?id=65326 ?
>
>
>
>
>
>
>On Thursday 6 January 2022, 03:37:42 GMT+1, Sayi  wrote: 
>
>
>
>
>
>
>Hi,
>
>When using POI, the log will print a lot of warn's exception stack 
>informations:
>
>
>
>
>The user must remove this information through the log framework. If these 
>warns do not affect the POI work, can we consider modifying the log level or 
>not printing the exception stack and whether this problem should be solved in 
>5.2.0?
>
>
>
>Best regards,
>Sayi
>At 2022-01-05 21:12:41, "PJ Fanning"  wrote:
>>Hi everyone,
>>
>>
>>I've prepared artifacts for the release of Apache POI 5.2.0 (RC1).
>>
>>
>>The most notable changes in this release are:
>>
>>* upgrade dependencies: XmlBeans 5.0.3, XMLSec 2.3.0, BouncyCastle 1.70, 
>>Log4j-API 2.17.1, PDFBox Graphics2d 0.34, PDFBox 2.0.25 ...
>>* Issue in XSSFReader where string builder is not always cleared between cell 
>>reads [#65676]
>>* Extra DataFormatter options [#63211], [#65703], [#65730]
>>* Password Protecting a document when Saxon is on classpath can corrupt the 
>>output [#65701]
>>* stop using file deleteOnExit in DefaultTempFileCreationStrategy [#65772]
>>* Support for Excel functions XMATCH, XLOOKUP
>>* Extra checks for malicious files that could cause excess memory usage 
>>
>>
>>
>>A full list of changes is available in the change log:
>>
>>https://poi.apache.org/changes.html
>>
>>
>>The artifacts are at:
>>
>>https://dist.apache.org/repos/dist/dev/poi/
>>
>>
>>You can use this maven URL for your mvn/gradle builds:
>>
>>https://repository.apache.org/content/repositories/staging
>>
>>
>>
>>I haven't updated the "provided" dependencies as those have to be activated 
>>anyway explicitly.
>>
>>
>>Please vote to release the artifacts.
>>
>>
>>The vote keeps open until 2022-01-12 23:00 UTC.
>>
>>
>>
>>Planned release announcement date is Friday, 2021-12-31.
>>
>>
>>
>>Here is my +1
>>
>>PJ
>>
>>-
>>To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
>>For additional commands, e-mail: dev-h...@poi.apache.org
>
>
>
>
> 
>
>-
>To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
>For additional commands, e-mail: dev-h...@poi.apache.org

-
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org



Re:Re: Re:[VOTE] Apache POI 5.2.0 release (RC1)

2022-01-06 Thread Sayi


Hi, PJ


I created an issue: https://bz.apache.org/bugzilla/show_bug.cgi?id=65786.




I also saw the warning message mentioned by #65326 through the log, but there 
were a lot of warning exception stacks in the log when unzipping the docx zip.





在 2022-01-06 16:05:59,"PJ Fanning"  写道:
>Hi Sayi,
>It looks like some of your email is missing. Would it be possible for you to 
>use plain text to give an example of the log messages or to provide a link to 
>a bugzilla issue that describes the problem?
>
>Is it something like https://bz.apache.org/bugzilla/show_bug.cgi?id=65326 ?
>
>
>
>
>
>
>On Thursday 6 January 2022, 03:37:42 GMT+1, Sayi  wrote: 
>
>
>
>
>
>
>Hi,
>
>When using POI, the log will print a lot of warn's exception stack 
>informations:
>
>
>
>
>The user must remove this information through the log framework. If these 
>warns do not affect the POI work, can we consider modifying the log level or 
>not printing the exception stack and whether this problem should be solved in 
>5.2.0?
>
>
>
>Best regards,
>Sayi
>At 2022-01-05 21:12:41, "PJ Fanning"  wrote:
>>Hi everyone,
>>
>>
>>I've prepared artifacts for the release of Apache POI 5.2.0 (RC1).
>>
>>
>>The most notable changes in this release are:
>>
>>* upgrade dependencies: XmlBeans 5.0.3, XMLSec 2.3.0, BouncyCastle 1.70, 
>>Log4j-API 2.17.1, PDFBox Graphics2d 0.34, PDFBox 2.0.25 ...
>>* Issue in XSSFReader where string builder is not always cleared between cell 
>>reads [#65676]
>>* Extra DataFormatter options [#63211], [#65703], [#65730]
>>* Password Protecting a document when Saxon is on classpath can corrupt the 
>>output [#65701]
>>* stop using file deleteOnExit in DefaultTempFileCreationStrategy [#65772]
>>* Support for Excel functions XMATCH, XLOOKUP
>>* Extra checks for malicious files that could cause excess memory usage 
>>
>>
>>
>>A full list of changes is available in the change log:
>>
>>https://poi.apache.org/changes.html
>>
>>
>>The artifacts are at:
>>
>>https://dist.apache.org/repos/dist/dev/poi/
>>
>>
>>You can use this maven URL for your mvn/gradle builds:
>>
>>https://repository.apache.org/content/repositories/staging
>>
>>
>>
>>I haven't updated the "provided" dependencies as those have to be activated 
>>anyway explicitly.
>>
>>
>>Please vote to release the artifacts.
>>
>>
>>The vote keeps open until 2022-01-12 23:00 UTC.
>>
>>
>>
>>Planned release announcement date is Friday, 2021-12-31.
>>
>>
>>
>>Here is my +1
>>
>>PJ
>>
>>-
>>To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
>>For additional commands, e-mail: dev-h...@poi.apache.org
>
>
>
>
> 
>
>-
>To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
>For additional commands, e-mail: dev-h...@poi.apache.org


Re: [VOTE] Apache POI 5.2.0 release (RC1)

2022-01-06 Thread PJ Fanning
Sure. Let's call RC1 a bust. I can do an RC2 in a few days. I'll just wait to 
see if anyone has anything else that they want to get done for the RC2 first.

I would appreciate if any changes that are not fairly urgent be kept back until 
after the RC2 is produced and evaluated.






On Thursday 6 January 2022, 12:11:33 GMT+1, Dominik Stadler 
 wrote: 





Hi,

I did a partial regression-test round and found a few smaller issues, some
of the new limits are hit by some valid test-files, so I increased a few of
those a bit. Not sure how likely such documents are encountered out there,
but if we want to keep handling those without regressions, we should roll a
RC2 with latest trunk.

Otherwise regression tests look good with only very few failures which are
explained by more support for features in HSLF.

Dominik.


On Wed, Jan 5, 2022 at 2:12 PM PJ Fanning 
wrote:

> Hi everyone,
>
>
> I've prepared artifacts for the release of Apache POI 5.2.0 (RC1).
>
>
> The most notable changes in this release are:
>
> * upgrade dependencies: XmlBeans 5.0.3, XMLSec 2.3.0, BouncyCastle 1.70,
> Log4j-API 2.17.1, PDFBox Graphics2d 0.34, PDFBox 2.0.25 ...
> * Issue in XSSFReader where string builder is not always cleared between
> cell reads [#65676]
> * Extra DataFormatter options [#63211], [#65703], [#65730]
> * Password Protecting a document when Saxon is on classpath can corrupt
> the output [#65701]
> * stop using file deleteOnExit in DefaultTempFileCreationStrategy [#65772]
> * Support for Excel functions XMATCH, XLOOKUP
> * Extra checks for malicious files that could cause excess memory usage
>
>
>
> A full list of changes is available in the change log:
>
> https://poi.apache.org/changes.html
>
>
> The artifacts are at:
>
> https://dist.apache.org/repos/dist/dev/poi/
>
>
> You can use this maven URL for your mvn/gradle builds:
>
> https://repository.apache.org/content/repositories/staging
>
>
>
> I haven't updated the "provided" dependencies as those have to be
> activated anyway explicitly.
>
>
> Please vote to release the artifacts.
>
>
> The vote keeps open until 2022-01-12 23:00 UTC.
>
>
>
> Planned release announcement date is Friday, 2021-12-31.
>
>
>
> Here is my +1
>
> PJ
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
> For additional commands, e-mail: dev-h...@poi.apache.org
>
>

-
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org



Re: [VOTE] Apache POI 5.2.0 release (RC1)

2022-01-06 Thread Dominik Stadler
Hi,

I did a partial regression-test round and found a few smaller issues, some
of the new limits are hit by some valid test-files, so I increased a few of
those a bit. Not sure how likely such documents are encountered out there,
but if we want to keep handling those without regressions, we should roll a
RC2 with latest trunk.

Otherwise regression tests look good with only very few failures which are
explained by more support for features in HSLF.

Dominik.


On Wed, Jan 5, 2022 at 2:12 PM PJ Fanning 
wrote:

> Hi everyone,
>
>
> I've prepared artifacts for the release of Apache POI 5.2.0 (RC1).
>
>
> The most notable changes in this release are:
>
> * upgrade dependencies: XmlBeans 5.0.3, XMLSec 2.3.0, BouncyCastle 1.70,
> Log4j-API 2.17.1, PDFBox Graphics2d 0.34, PDFBox 2.0.25 ...
> * Issue in XSSFReader where string builder is not always cleared between
> cell reads [#65676]
> * Extra DataFormatter options [#63211], [#65703], [#65730]
> * Password Protecting a document when Saxon is on classpath can corrupt
> the output [#65701]
> * stop using file deleteOnExit in DefaultTempFileCreationStrategy [#65772]
> * Support for Excel functions XMATCH, XLOOKUP
> * Extra checks for malicious files that could cause excess memory usage
>
>
>
> A full list of changes is available in the change log:
>
> https://poi.apache.org/changes.html
>
>
> The artifacts are at:
>
> https://dist.apache.org/repos/dist/dev/poi/
>
>
> You can use this maven URL for your mvn/gradle builds:
>
> https://repository.apache.org/content/repositories/staging
>
>
>
> I haven't updated the "provided" dependencies as those have to be
> activated anyway explicitly.
>
>
> Please vote to release the artifacts.
>
>
> The vote keeps open until 2022-01-12 23:00 UTC.
>
>
>
> Planned release announcement date is Friday, 2021-12-31.
>
>
>
> Here is my +1
>
> PJ
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
> For additional commands, e-mail: dev-h...@poi.apache.org
>
>


Re: Re:[VOTE] Apache POI 5.2.0 release (RC1)

2022-01-06 Thread PJ Fanning
Hi Sayi,
It looks like some of your email is missing. Would it be possible for you to 
use plain text to give an example of the log messages or to provide a link to a 
bugzilla issue that describes the problem?

Is it something like https://bz.apache.org/bugzilla/show_bug.cgi?id=65326 ?






On Thursday 6 January 2022, 03:37:42 GMT+1, Sayi  wrote: 






Hi,

When using POI, the log will print a lot of warn's exception stack informations:




The user must remove this information through the log framework. If these warns 
do not affect the POI work, can we consider modifying the log level or not 
printing the exception stack and whether this problem should be solved in 5.2.0?



Best regards,
Sayi
At 2022-01-05 21:12:41, "PJ Fanning"  wrote:
>Hi everyone,
>
>
>I've prepared artifacts for the release of Apache POI 5.2.0 (RC1).
>
>
>The most notable changes in this release are:
>
>* upgrade dependencies: XmlBeans 5.0.3, XMLSec 2.3.0, BouncyCastle 1.70, 
>Log4j-API 2.17.1, PDFBox Graphics2d 0.34, PDFBox 2.0.25 ...
>* Issue in XSSFReader where string builder is not always cleared between cell 
>reads [#65676]
>* Extra DataFormatter options [#63211], [#65703], [#65730]
>* Password Protecting a document when Saxon is on classpath can corrupt the 
>output [#65701]
>* stop using file deleteOnExit in DefaultTempFileCreationStrategy [#65772]
>* Support for Excel functions XMATCH, XLOOKUP
>* Extra checks for malicious files that could cause excess memory usage 
>
>
>
>A full list of changes is available in the change log:
>
>https://poi.apache.org/changes.html
>
>
>The artifacts are at:
>
>https://dist.apache.org/repos/dist/dev/poi/
>
>
>You can use this maven URL for your mvn/gradle builds:
>
>https://repository.apache.org/content/repositories/staging
>
>
>
>I haven't updated the "provided" dependencies as those have to be activated 
>anyway explicitly.
>
>
>Please vote to release the artifacts.
>
>
>The vote keeps open until 2022-01-12 23:00 UTC.
>
>
>
>Planned release announcement date is Friday, 2021-12-31.
>
>
>
>Here is my +1
>
>PJ
>
>-
>To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
>For additional commands, e-mail: dev-h...@poi.apache.org




 

-
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org



Re:[VOTE] Apache POI 5.2.0 release (RC1)

2022-01-05 Thread Sayi



Hi,


When using POI, the log will print a lot of warn's exception stack informations:




The user must remove this information through the log framework. If these warns 
do not affect the POI work, can we consider modifying the log level or not 
printing the exception stack and whether this problem should be solved in 5.2.0?



Best regards,

Sayi


At 2022-01-05 21:12:41, "PJ Fanning"  wrote:
>Hi everyone,
>
>
>I've prepared artifacts for the release of Apache POI 5.2.0 (RC1).
>
>
>The most notable changes in this release are:
>
>* upgrade dependencies: XmlBeans 5.0.3, XMLSec 2.3.0, BouncyCastle 1.70, 
>Log4j-API 2.17.1, PDFBox Graphics2d 0.34, PDFBox 2.0.25 ...
>* Issue in XSSFReader where string builder is not always cleared between cell 
>reads [#65676]
>* Extra DataFormatter options [#63211], [#65703], [#65730]
>* Password Protecting a document when Saxon is on classpath can corrupt the 
>output [#65701]
>* stop using file deleteOnExit in DefaultTempFileCreationStrategy [#65772]
>* Support for Excel functions XMATCH, XLOOKUP
>* Extra checks for malicious files that could cause excess memory usage 
>
>
>
>A full list of changes is available in the change log:
>
>https://poi.apache.org/changes.html
>
>
>The artifacts are at:
>
>https://dist.apache.org/repos/dist/dev/poi/
>
>
>You can use this maven URL for your mvn/gradle builds:
>
>https://repository.apache.org/content/repositories/staging
>
>
>
>I haven't updated the "provided" dependencies as those have to be activated 
>anyway explicitly.
>
>
>Please vote to release the artifacts.
>
>
>The vote keeps open until 2022-01-12 23:00 UTC.
>
>
>
>Planned release announcement date is Friday, 2021-12-31.
>
>
>
>Here is my +1
>
>PJ
>
>-
>To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
>For additional commands, e-mail: dev-h...@poi.apache.org